Image Wall
Image Wall has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Image Wall has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Image Wall is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-48156Image Wall <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Image Wall
Author
Parakoos
This wordpress plugin allows visitors to browse posts or pages by their images, displayed randomly on an infinitely scrollable Image Wall. The images link back to the post or page on which they are attached. Images are powerful. They catch our attention like nothing else. You probably use them in your blog posts to anchor the fickle attention span of today’s readers. Display all these great images on a nice looking page, and your visitors will browse for a while, captivated. Hopefully, one image will stand out for whatever reason and compel the visitor to click it to find out more. And just like that, some old blog post you thought buried by the sands of time has gotten another view, thanks to your Image Wall. You can see the plugin in action on my own Image Wall and the full plugin documentation on the Image Wall Plugin page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C